Team login — passwords are verified server-side